apply base role to ns1

* another option is to make 'dns' role depend on 'base'